Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: gz2vRFJ/PC7yCQuAGUj2lMrhsCL3CjPZDYsUTKV8smU=
Subject key identifier: 34:F9:E2:A0:73:CA:31:3B:0C:51:3E:80:A5:18:6C:8C:CB:CA:8E:D2
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 01976C621526C9B17832D0188F944DB5702F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 03:00:56 +0000
Manifest this update: Sat 14 Jun 2025 03:00:56 +0000
Manifest next update: Sun 15 Jun 2025 03:00:56 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: UUb1nfRBzUns6GN1F+/gZ8h7Ss+rWCVNFxOBmdyQPRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:15:26:c9:b1:78:32:d0:18:8f:94:4d:b5:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jun 14 03:00:56 2025 GMT
Not After : Jun 15 03:00:56 2025 GMT
Subject: CN=34f9e2a073ca313b0c513e80a5186c8ccbca8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:53:dd:51:0f:99:74:e0:1c:3d:12:44:83:
7b:82:b1:18:53:4e:f4:d3:4e:8c:70:37:82:9a:cf:
3d:6c:f4:31:8e:86:c0:04:5f:77:34:14:37:73:b0:
12:8a:5b:fd:57:54:a7:44:cf:01:62:dc:21:ff:c9:
27:d2:bf:ed:59:bc:60:11:14:8c:4f:75:25:70:8a:
62:cd:f6:b5:27:98:98:3a:60:54:de:fe:d1:7d:03:
db:fb:cf:da:f6:ef:b7:d6:aa:20:e5:22:9f:f2:07:
63:a3:25:ee:bc:fe:b9:4b:15:34:0e:f6:18:80:92:
62:9d:6f:53:47:a7:2e:a1:40:9c:91:0a:8b:af:5e:
ba:e8:d8:36:7a:e5:06:8f:5c:7c:b0:f8:92:31:e2:
91:df:96:e3:b7:95:bf:6e:6e:5e:35:28:6e:a1:29:
5d:ce:0b:98:ad:6d:84:ec:d4:49:89:43:af:84:58:
b3:5d:9c:39:9a:20:6c:1a:5d:27:ef:8b:eb:31:f0:
96:0c:25:76:d1:bb:ba:b3:12:74:69:11:85:b6:c5:
ae:63:9f:a5:0d:75:9d:61:a2:13:ed:dc:ee:df:07:
a9:b9:01:98:61:a4:fa:0d:ad:23:89:ab:be:21:91:
2b:50:dd:f5:11:26:f7:29:c9:04:82:6c:37:db:e0:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F9:E2:A0:73:CA:31:3B:0C:51:3E:80:A5:18:6C:8C:CB:CA:8E:D2
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:e2:1c:77:53:b8:67:6f:a5:9a:b6:8b:d1:fa:5c:54:8f:
d3:e3:ea:74:12:7b:d5:87:e5:4b:9c:8b:c0:4d:b4:ad:6b:d4:
b9:99:9f:49:3f:17:85:fe:e1:2e:64:18:d9:4c:0b:e5:3f:4a:
90:27:bf:e7:1f:95:8b:3b:9e:8f:72:d9:21:05:3c:72:b8:01:
ba:15:04:12:ec:e5:80:7c:89:41:92:6d:1b:02:58:a8:69:3e:
ec:64:56:11:b6:44:c7:77:c3:4f:c8:74:5f:a7:ca:1a:e6:a6:
e5:77:cb:c3:b4:38:59:ad:4f:23:67:71:c2:8f:48:d9:67:f0:
0c:b6:5d:22:8c:06:4f:57:9f:a6:c8:1e:af:a5:31:34:0f:85:
bb:51:7a:f9:e4:76:30:55:83:19:20:8d:50:87:c5:b2:36:e2:
07:7e:d5:8c:a1:64:a4:c7:5a:71:e9:5f:9d:28:a1:f2:5e:1c:
b7:22:2b:ee:36:7b:75:88:d4:61:94:c6:17:1c:46:1b:45:b6:
e5:45:b5:48:99:e2:22:28:d8:d4:f8:d4:14:5e:27:fd:d1:de:
f3:4e:c0:5b:df:85:85:96:77:ec:44:67:14:f7:1d:e5:b3:31:
55:3b:3e:04:78:0a:c2:93:6a:bb:21:76:78:aa:6c:77:bf:98:
32:6c:ea:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYhUmybF4MtAYj5RNtXAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy
NDkxYzUwHhcNMjUwNjE0MDMwMDU2WhcNMjUwNjE1MDMwMDU2WjAzMTEwLwYDVQQD
EygzNGY5ZTJhMDczY2EzMTNiMGM1MTNlODBhNTE4NmM4Y2NiY2E4ZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14RT3VEPmXTgHD0SRIN7grEYU070
006McDeCms89bPQxjobABF93NBQ3c7ASilv9V1SnRM8BYtwh/8kn0r/tWbxgERSM
T3UlcIpizfa1J5iYOmBU3v7RfQPb+8/a9u+31qog5SKf8gdjoyXuvP65SxU0DvYY
gJJinW9TR6cuoUCckQqLr1666Ng2euUGj1x8sPiSMeKR35bjt5W/bm5eNShuoSld
zguYrW2E7NRJiUOvhFizXZw5miBsGl0n74vrMfCWDCV20bu6sxJ0aRGFtsWuY5+l
DXWdYaIT7dzu3wepuQGYYaT6Da0jiau+IZErUN31ESb3KckEgmw32+CU+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT54qBzyjE7DFE+gKUYbIzLyo7SMB8GA1UdIwQY
MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt
MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi
LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbDiHHdT
uGdvpZq2i9H6XFSP0+PqdBJ71YflS5yLwE20rWvUuZmfST8Xhf7hLmQY2UwL5T9K
kCe/5x+Vizuej3LZIQU8crgBuhUEEuzlgHyJQZJtGwJYqGk+7GRWEbZEx3fDT8h0
X6fKGuam5XfLw7Q4Wa1PI2dxwo9I2WfwDLZdIowGT1efpsger6UxNA+Fu1F6+eR2
MFWDGSCNUIfFsjbiB37VjKFkpMdacelfnSih8l4ctyIr7jZ7dYjUYZTGFxxGG0W2
5UW1SJniIijY1PjUFF4n/dHe807AW9+FhZZ37ERnFPcd5bMxVTs+BHgKwpNquyF2
eKpsd7+YMmzqUA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:50 2025 by rpki-client